Hi, hoping someone can tell me if I might have a cracker running about my system. When I run lsof +L1, I get the following output.

COMMAND PID USER FD TYPE DEVICE SIZE NLINK NODE NAME
kio_file 4703 orion 10r REG 3,1 1592776 0 13599186 /var/tmp/kdecache-orion/ksycoca



I've read having an open file with a link count of less than 1 can indicate a cracker hiding his tracks. I'm running Kubuntu Edgy, fully updated. I killed the process with kill -9. So now what do I do ? Anyone have some advice ? Do I have anything to worry about ?

Thanks much...

David

The man page says even soockets and fifo will have no link count.
And the file u`ve shown seems to be a socket file.
You can check if the file is present and check the file type with the command

file <filename>